Add CHANGES.md entry for ess_cert_id_alg default change

The default was changed in 10536b7 Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from openssl#21845)
PHOENIXCONTACT · Aug 31, 2023 · 305dc68 · 305dc68
1 parent 8a7f30e
commit 305dc68
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -25,6 +25,13 @@ OpenSSL 3.2
 
 ### Changes between 3.1 and 3.2 [xx XXX xxxx]
 
+ * Changed the default value of the `ess_cert_id_alg` configuration
+   option which is used to calculate the TSA's public key certificate
+   identifier. The default algorithm is updated to be sha256 instead
+   of sha1.
+
+   *Małgorzata Olszówka*
+
  * Added optimization for SM2 algorithm on aarch64. It uses a huge precomputed
    table for point multiplication of the base point, which increases the size of
    libcrypto from 4.4 MB to 4.9 MB. A new configure option `no-sm2-precomp` has